O'Reilly logo

Windows Forensics and Incident Recovery by Harlan Carvey

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Port Scanners

Port scanners allow an administrator or investigator to determine which ports are open on a remote system. Port scanners may be used in conjunction with an investigation in order to determine if there are any open ports that do not appear in the output of netstat.exe or process-to-port mapping tools such as openports.exe.

If the investigator detects open ports using a port scanner but does not find any indication of that same port being open and using tools on the system itself, this may indicate suspicious activity on the system. In other cases, the output of a port scanner can be the first indication that something may be amiss. If the administrator or investigator discovers an unusual port open on a system, it may indicate the ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required